2498 matches found
Siemens SIMATIC S7-1500 CPU family
SUMMARY Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP incl. SIPLUS variant. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not...
PT-2025-24695 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in privilege escalation. A low-privileged attacker could...
GHSA-4G4G-FQW4-PRP2 vulnerabilities
Vulnerabilities for packages: python...
MINI-CR3F-F644-XMQR
Bulletin has no description...
PT-2025-24565 · Pion · Pion Interceptor
Name of the Vulnerable Software and Affected Versions: Pion Interceptor versions v0.1.36 through v0.1.38 Description: Pion Interceptor is a framework for building RTP/RTCP communication software. The issue is caused by a bug in the RTP packet factory, which can be exploited by crafted RTP packets...
MAL-2025-4716 Malicious code in pay-gateway (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833ef41ae1118909a10510c9670df5ab91c285cab62449451578a869afa05aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-CVX7-X8PJ-X2GW CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification
Summary A Denial of Service DoS vulnerability was discovered in the CoreDNS DNS-over-QUIC DoQ server implementation. The server previously created a new goroutine for every incoming QUIC stream without imposing any limits on the number of concurrent streams or goroutines. A remote, unauthenticate...
PT-2025-24050
Name of the Vulnerable Software and Affected Versions code-projects Traffic Offense Reporting System version 1.0 Description A problematic issue was found in the system, affecting an unknown part, and leading to cross-site request forgery. The manipulation can be initiated remotely. Recommendatio...
MAL-2025-4701 Malicious code in bu_account_js_sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc62579251997ba805a1917e4c99f877f16b19a293c2c910ff35fac17606a1d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: Multiple vulnerabilities which can affect IBM Storage Scale are now addressed. (CVE-2024-45337, CVE-2024-45338)
Summary There are several vulnerabilities in IBM Storage Scale which could provide weaker than expected security that are now addressed CVE-2024-45337, CVE-2024-45338 Vulnerability Details CVEID:CVE-2024-45337 DESCRIPTION: Applications and libraries which misuse connection.serverAuthenticate via...
MAL-2025-4695 Malicious code in system-health-sync-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c337e149bd36fcd54891e550bf7fdb7c1dc36b1bfc1b06e0b1427851d4adde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE: Security Advisory (SUSE-SU-2024:3561-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-23788
Name of the Vulnerable Software and Affected Versions libcurl versions prior to 8.0.0 Oracle MySQL versions 8.0.0 and earlier Oracle MySQL versions 8.4.0 and earlier Oracle MySQL versions 9.0.0 and earlier Description A flaw exists in the WebSocket code of libcurl where a malicious server can sen...
Why Take9 Won’t Improve Cybersecurity
There's a new cybersecurity awareness campaign: Take9. The idea is that people--you, me, everyone--should just pause for nine seconds and think more about the link they are planning to click on, the file they are planning to download, or whatever it is they are planning to share. There's a...
ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach
ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor. "ConnectWise recently learned of suspicious activity within our environment that we believe wa...
CVE-2025-44904
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
MINI-RHC5-HQ55-8G57
Bulletin has no description...
MINI-RHCJ-CWJ5-QPXW
Bulletin has no description...